Verification of sustainability reports

Before starting work, the verifier must ensure that:

· The assignment is appropriate (there is a verifiable "object" and appropriate criteria).

· The customer understands their responsibilities, especially:

o Preparation of information.

o Internal controls.

o Access to information/evidence.

· The requirements of ethics, independence, and competence are met.

· The work can be performed to an adequate standard of quality.

It is formalized by means of a letter of engagement.

It involves designing an effective verification approach:

· Understand the object being verified (e.g., non-financial indicators, processes, controls).

· Understand the criteria used (standards, methodologies, policies).

· Identify stakeholders and the intended use of the report.

· Assess materiality (what is significant for the conclusion).

· Determine the level of assurance:

or ✔ Reasonable

or ✔ Limited

· Assess risks of material misstatement.

· Establish strategy and work plan (procedures and resources).

The verifier analyzes how the entity generates the information:

· Review of the design and, if relevant, the effectiveness of controls.

· Understanding of systems, processes, and data sources.

· Identification of potential risks of error, omission, or manipulation.

This stage determines the nature, scope, and timing of subsequent proceedings.

Here, verification procedures are performed to obtain sufficient and appropriate evidence to support the conclusion.

It may include:

· Inspection of documents and records.

· Analytical review.

· Re-execution of calculations or processes.

· External confirmations, if applicable.

· Interviews with managers and technicians.

· Process observation.

· Data detail testing.

· Comparisons with criteria, standards, or methodologies.

The extension depends on the type of insurance (limited or reasonable).

The auditor evaluates all evidence and determines whether:

· The information is free from material inaccuracies with respect to the criteria.

· The identified risks are adequately addressed.

· The evidence is sufficient to support the conclusion.

Includes:

· Resolve inconsistencies.

· Evaluate detected inaccuracies.

· Assess whether limitations in scope persist.

The verification report in accordance with ISAE 3000 must contain:

· Title, indicating independence.

· Recipients.

· Purpose and criteria of the assignment.

· Level of assurance (reasonable or limited).

· Description of the work performed.

· Professional conclusion (positive or negative depending on the level of certainty).

· Restrictions, limitations, or emphasis, if applicable.

· Signature, date, and details of the verifier.